Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
File: kHpcTqRTtGyByxNtkrkwmxRsPkU.mft (raw, json)
Hash identifier: jsZWsvz2WXY3wERWQCtVmgNjaYo8txwaOqTzO5ZnjCo=
Subject key identifier: C9:75:C3:10:86:18:0B:50:4B:52:CC:B1:49:8A:54:8D:CB:98:D2:4D
Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
Certificate issuer: /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Certificate serial: 019CAA8FC24016F515F6BC182E56538D54AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
Manifest number: 0B51
Signing time: Sun 01 Mar 2026 18:01:13 +0000
Manifest this update: Sun 01 Mar 2026 18:01:13 +0000
Manifest next update: Mon 02 Mar 2026 18:01:13 +0000
Files and hashes: 1: kHpcTqRTtGyByxNtkrkwmxRsPkU.crl (hash: 4a9bTo8cWsKqhn+Rhkv4FsoQC1K0nhT/v0w7gyroroU=)
2: riD84npooDzOqhlvH7nf9Aj294A.roa (hash: O+rbEotKGudbvk9Gq/WMzzdZufBN90ky0PyB//XXeaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c2:40:16:f5:15:f6:bc:18:2e:56:53:8d:54:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Validity
Not Before: Mar 1 18:01:13 2026 GMT
Not After : Mar 2 18:01:13 2026 GMT
Subject: CN=c975c31086180b504b52ccb1498a548dcb98d24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:95:5a:5d:d3:a6:c7:8d:94:08:21:0b:22:
d8:7f:c2:81:8c:f1:a6:19:98:09:be:cd:ae:3c:0d:
89:42:5c:98:8a:0d:62:b3:52:29:65:42:b3:d7:3d:
bd:97:08:90:cc:58:2f:c3:28:f2:78:14:99:59:e0:
d4:9c:4a:12:3b:c6:8d:3e:3a:24:9b:35:33:44:1a:
20:73:0b:2d:ba:63:60:c6:79:e5:0b:49:29:1f:ee:
d1:50:5f:11:6e:20:68:6b:68:74:da:68:78:50:e2:
bb:ea:3f:da:e6:a3:0d:e8:37:ec:f8:8e:9f:4d:56:
ec:ac:d0:de:b9:9c:c2:70:7a:53:db:ed:6c:4e:d9:
af:7f:b3:ed:b6:7d:c2:e6:de:4a:3b:80:e2:06:6a:
8e:60:be:64:6c:fe:6b:0f:c1:0a:22:05:b6:48:97:
b5:7f:2b:d9:9e:49:fe:5e:be:90:ab:1b:a7:df:f0:
db:2c:67:a0:4b:a9:50:88:e7:1a:2c:74:a4:5f:33:
e5:2e:20:9c:e3:6f:0c:ea:df:68:46:4f:a3:2b:d4:
d0:c1:81:cd:47:14:29:2b:ee:ad:01:f0:7a:b8:a6:
14:c3:c1:90:e8:97:41:8e:45:24:c1:05:ff:82:30:
44:d9:33:2a:4b:35:87:38:da:f6:74:3a:39:60:89:
4d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:75:C3:10:86:18:0B:50:4B:52:CC:B1:49:8A:54:8D:CB:98:D2:4D
X509v3 Authority Key Identifier:
keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:71:9e:95:64:15:83:30:52:18:57:3b:4d:0e:81:92:59:4b:
11:87:2d:ab:86:5f:f0:95:9f:d3:e6:39:11:49:d0:5d:bd:ec:
b8:9d:c5:2c:29:99:45:16:30:a5:48:f0:29:33:df:3b:6c:78:
db:ff:a4:61:4a:eb:66:99:ef:2e:a1:e3:3c:c3:d1:a8:14:48:
4d:ad:71:eb:38:71:a9:f2:62:f5:19:39:68:70:8c:9a:8e:ee:
3d:86:02:2c:f4:95:26:be:d6:a5:e1:04:b1:a5:fc:06:ff:3c:
03:d4:fd:14:d6:2b:d2:ef:3e:7e:cf:19:0c:6b:0b:5d:79:82:
a4:66:ca:bb:47:27:b3:07:0c:20:0c:a7:f3:d6:d5:92:bd:4e:
c3:05:90:a4:e6:29:37:7a:6f:67:35:f4:5e:46:81:f3:92:40:
ec:d0:18:b1:e0:b8:73:d7:3a:96:e2:95:b1:c6:47:41:ae:69:
d8:24:80:0c:29:0f:24:15:0c:e3:1f:2a:fe:17:6d:62:10:f8:
a6:83:8c:6a:f2:ca:c1:e0:53:18:08:6c:64:52:b3:30:9b:b0:
b5:bd:c7:1e:56:5f:5f:ad:a8:c9:98:24:0c:98:2a:f6:f1:1d:
f3:c3:ec:a8:64:90:f2:42:18:0a:5b:15:c2:3e:e8:09:12:95:
85:20:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:12 2026 by rpki-client